Page MenuHomePhabricator

Buttons to switch 2FA method read incorrectly by VoiceOver screen reader
Closed, ResolvedPublicBUG REPORT

Description

What is the problem?

When logging into an account with multiple different 2FA methods, the buttons Use security key and Use recovery key are both read as "Use authenticator app" by the Apple VoiceOver screen reader.

They are read correctly by Orca and NVDA.

Steps to reproduce problem
  1. Setup a user with both a TOTP and WebAuthn authenticators.
  2. On Mac, turn on the screen reader
  3. Attempt to login as the same user
  4. After entering your username and password, you will be prompted for the WebAuthn device. Dismiss this
  5. Click "Use authenticator app"
  6. Use the screen reader to read the two buttons below the TOTP input
Environment

Platform: MacOS Sequoia Safari 18.4. VoiceOver.
Wiki(s): https://en.wikipedia.beta.wmflabs.org OATHAuth – (c702fa8) 10:45, 7 October 2025. WebAuthn – (1957699) 20:10, 3 October 2025.

Event Timeline

Catrope subscribed.

This is probably because they have the same name attribute. We could look into restructuring TwoFactorModuleSelectAuthenticationRequest to not need that, but that might be difficult.

Change #1305783 had a related patch set uploaded (by TheDJ; author: TheDJ):

[mediawiki/extensions/OATHAuth@master] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1305783

Change #1305783 merged by jenkins-bot:

[mediawiki/extensions/OATHAuth@master] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1305783

Change #1306417 had a related patch set uploaded (by Reedy; author: TheDJ):

[mediawiki/extensions/OATHAuth@REL1_46] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1306417

Change #1306418 had a related patch set uploaded (by Reedy; author: TheDJ):

[mediawiki/extensions/OATHAuth@REL1_45] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1306418

Change #1306417 merged by jenkins-bot:

[mediawiki/extensions/OATHAuth@REL1_46] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1306417

Change #1306418 merged by Reedy:

[mediawiki/extensions/OATHAuth@REL1_45] a11y: Use unique id's for the auth module method buttons

https://gerrit.wikimedia.org/r/1306418

TheDJ triaged this task as Low priority.